Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGNvTQuFTeqyPqIml3vrMVuc6V4.cer
File: fGNvTQuFTeqyPqIml3vrMVuc6V4.cer (raw, json)
Hash identifier: erz6nXuL6Z2/ulMHtVSIMz5NcRPiSk1A4zz27Yia6iI=
Subject key identifier: 7C:63:6F:4D:0B:85:4D:EA:B2:3E:A2:26:97:7B:EB:31:5B:9C:E9:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AC087B64FF82F7325E06DABE52B712B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.terratransit.de/repo/TerraTransit/220/7C636F4D0B854DEAB23EA226977BEB315B9CE95E.mft
caRepository: rsync://rpki1.terratransit.de/repo/TerraTransit/220
Notify URL: https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 00:34:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.147.54.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:c0:87:b6:4f:f8:2f:73:25:e0:6d:ab:e5:2b:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:34:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c636f4d0b854deab23ea226977beb315b9ce95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:48:03:5c:81:fb:ca:eb:1e:6a:6f:58:b1:
bb:b6:62:7a:46:f2:b6:d5:11:8c:6e:cd:0a:47:62:
2c:58:2f:d0:92:8c:74:58:33:ae:a5:d9:82:28:1f:
8d:a0:fe:d2:b2:f2:40:c3:8d:66:53:11:c0:54:38:
4b:69:f9:58:61:c0:5a:bc:09:20:3a:4c:8a:0e:09:
b7:2e:41:1b:93:2d:3d:d0:84:45:97:e1:ef:84:f8:
82:69:f8:fa:f9:c0:eb:a9:5c:55:ba:d2:e5:04:4b:
3a:de:0e:01:9a:fa:85:dc:60:6c:05:18:03:4a:fe:
66:43:f5:bc:af:6f:fd:68:5b:22:d1:a5:94:59:5e:
9b:7e:49:7a:23:68:5c:c8:e2:05:d1:40:a7:a4:96:
0a:55:9d:43:d3:37:a6:60:ad:08:90:31:ad:48:17:
e0:05:98:31:1b:e6:29:b0:81:72:9f:a3:9a:9e:fb:
9d:2f:b5:70:86:fe:23:a4:24:17:92:bc:71:5c:99:
27:43:27:e9:29:47:24:89:3b:b7:7e:e1:13:16:ba:
3d:a0:5a:d5:37:68:1d:58:37:69:1b:f5:7b:b9:8f:
12:99:d8:4f:49:51:bf:ae:76:10:b0:37:ab:11:0c:
f8:e5:24:b3:ea:be:48:ae:e3:55:a2:dd:61:65:45:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:6F:4D:0B:85:4D:EA:B2:3E:A2:26:97:7B:EB:31:5B:9C:E9:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/220
RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/220/7C636F4D0B854DEAB23EA226977BEB315B9CE95E.mft
RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.54.0/24
Signature Algorithm: sha256WithRSAEncryption
97:74:cd:18:28:f0:dd:20:0a:d3:1b:db:33:73:4a:0c:eb:4c:
e8:d5:32:38:b4:ec:6c:ac:e7:6a:7e:4c:5a:46:2c:11:e6:40:
28:06:af:a4:f1:60:17:9c:98:e1:8e:84:e0:2e:0d:fb:9e:74:
80:57:54:a3:fc:f3:c8:38:7c:47:ac:c5:33:40:d9:d5:36:0b:
44:93:44:16:4e:ac:1b:1e:dc:1c:bc:27:ca:a9:c9:a7:bc:e5:
6f:0f:5c:cd:da:43:a8:78:44:97:58:ef:fb:60:0b:78:81:a2:
48:44:fd:1c:78:9a:fb:90:f2:56:40:5d:9f:4c:fe:e1:d0:c6:
59:40:d8:9b:b9:17:63:e2:f9:d7:93:4c:d6:1d:de:ba:2a:3c:
ad:d0:4d:f5:c5:54:5c:b7:9a:e5:c8:87:e1:f9:0b:90:57:4e:
f9:26:0f:d1:d6:c6:0a:de:80:67:5a:37:be:dc:06:d6:bc:c6:
b2:ce:f3:70:70:91:7f:cb:65:73:ac:e8:89:bf:e9:cf:2d:49:
61:11:2b:d6:e0:2e:37:36:59:a3:e4:88:13:e1:f6:ec:47:59:
73:48:a9:c7:9c:0b:3b:ed:3d:4f:82:fe:f9:2d:1c:96:b9:8b:
b2:dd:39:bb:b4:b1:ba:cf:29:d3:6e:29:81:40:94:96:c9:46:
4e:c8:33:34
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYVqwIe2T/gvcyXgbavlK3ErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDAzNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzYzNmY0ZDBiODU0ZGVhYjIzZWEyMjY5NzdiZWIzMTViOWNlOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFFIA1yB+8rrHmpvWLG7tmJ6RvK2
1RGMbs0KR2IsWC/Qkox0WDOupdmCKB+NoP7SsvJAw41mUxHAVDhLaflYYcBavAkg
OkyKDgm3LkEbky090IRFl+HvhPiCafj6+cDrqVxVutLlBEs63g4BmvqF3GBsBRgD
Sv5mQ/W8r2/9aFsi0aWUWV6bfkl6I2hcyOIF0UCnpJYKVZ1D0zemYK0IkDGtSBfg
BZgxG+YpsIFyn6OanvudL7Vwhv4jpCQXkrxxXJknQyfpKUckiTu3fuETFro9oFrV
N2gdWDdpG/V7uY8SmdhPSVG/rnYQsDerEQz45SSz6r5IruNVot1hZUWjwwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFHxjb00LhU3qsj6iJpd76zFbnOleMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEABggrBgEFBQcBCwSB8zCB8DA/BggrBgEFBQcwBYYzcnN5
bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMjIw
MGwGCCsGAQUFBzAKhmByc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBv
L1RlcnJhVHJhbnNpdC8yMjAvN0M2MzZGNEQwQjg1NERFQUIyM0VBMjI2OTc3QkVC
MzE1QjlDRTk1RS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBK
hkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28z
VlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmTNjANBgkqhkiG9w0B
AQsFAAOCAQEAl3TNGCjw3SAK0xvbM3NKDOtM6NUyOLTsbKznan5MWkYsEeZAKAav
pPFgF5yY4Y6E4C4N+550gFdUo/zzyDh8R6zFM0DZ1TYLRJNEFk6sGx7cHLwnyqnJ
p7zlbw9czdpDqHhEl1jv+2ALeIGiSET9HHia+5DyVkBdn0z+4dDGWUDYm7kXY+L5
15NM1h3euio8rdBN9cVUXLea5ciH4fkLkFdO+SYP0dbGCt6AZ1o3vtwG1rzGss7z
cHCRf8tlc6zoib/pzy1JYREr1uAuNzZZo+SIE+H27EdZc0ipx5wLO+09T4L++S0c
lrmLst05u7Sxus8p024pgUCUlslGTsgzNA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net